Security Warnings — Week: 2025-W37

Graphics Kernel Remote Code Execution Vulnerability

2025-09-09 CVE-2025-55226

mediumMicrosoft MSRC 2025-W37

Graphics Kernel Remote Code Execution Vulnerability

2025-09-09 CVE-2025-55236

highMicrosoft MSRC 2025-W37

gve: prevent ethtool ops after shutdown

2025-09-09 CVE-2025-38735

highMicrosoft MSRC 2025-W37

habanalabs: fix UAF in export_dmabuf()

2025-09-09 CVE-2025-38722

mediumMicrosoft MSRC 2025-W37

hfs: fix general protection fault in hfs_find_init()

2025-09-09 CVE-2025-38716

mediumMicrosoft MSRC 2025-W37

hfs: fix slab-out-of-bounds in hfs_bnode_read()

2025-09-09 CVE-2025-38715

mediumMicrosoft MSRC 2025-W37

hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()

2025-09-09 CVE-2025-38712

mediumMicrosoft MSRC 2025-W37

hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()

2025-09-09 CVE-2025-38714

criticalMicrosoft MSRC 2025-W37

hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()

2025-09-09 CVE-2025-38713

mediumMicrosoft MSRC 2025-W37

HID: asus: fix UAF via HID_CLAIMED_INPUT validation

2025-09-09 CVE-2025-39824

highMicrosoft MSRC 2025-W37

HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()

2025-09-09 CVE-2025-39808

mediumMicrosoft MSRC 2025-W37

HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()

2025-09-09 CVE-2025-39806

highMicrosoft MSRC 2025-W37

HTTP.sys Denial of Service Vulnerability

2025-09-09 CVE-2025-53805

highMicrosoft MSRC 2025-W37

hv_netvsc: Fix panic during namespace deletion with VF

2025-09-09 CVE-2025-38683

mediumMicrosoft MSRC 2025-W37

i40e: Fix potential invalid access when MAC list is empty

2025-09-09 CVE-2025-39853

highMicrosoft MSRC 2025-W37

iio: imu: bno055: fix OOB access of hw_xlate array

2025-09-09 CVE-2025-39719

mediumMicrosoft MSRC 2025-W37

iio: light: as73211: Ensure buffer holes are zeroed

2025-09-09 CVE-2025-39687

mediumMicrosoft MSRC 2025-W37

In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.

2025-09-09 CVE-2025-46152

mediumMicrosoft MSRC 2025-W37

In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.

2025-09-09 CVE-2025-46149

mediumMicrosoft MSRC 2025-W37

In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.

2025-09-09 CVE-2025-46150

mediumMicrosoft MSRC 2025-W37

In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.

2025-09-09 CVE-2025-46148

mediumMicrosoft MSRC 2025-W37

io_uring/net: commit partial buffers on retry

2025-09-09 CVE-2025-38730

mediumMicrosoft MSRC 2025-W37

iomap: iomap: fix memory corruption when recording errors during writeback

2025-09-09 CVE-2022-50406

highMicrosoft MSRC 2025-W37

iommu/arm-smmu-qcom: Add SM6115 MDSS compatible

2025-09-09 CVE-2025-39739

mediumMicrosoft MSRC 2025-W37

iommu/mediatek: Fix crash on isr after kexec()

2025-09-09 CVE-2022-50236

mediumMicrosoft MSRC 2025-W37

iommufd: Prevent ALIGN() overflow

2025-09-09 CVE-2025-38688

highMicrosoft MSRC 2025-W37

ipv6: sr: Fix MAC comparison to be constant-time

2025-09-09 CVE-2025-39702

highMicrosoft MSRC 2025-W37

irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4

2025-09-09 CVE-2023-53383

mediumMicrosoft MSRC 2025-W37

jbd2: prevent softlockup in jbd2_log_do_checkpoint()

2025-09-09 CVE-2025-39782

mediumMicrosoft MSRC 2025-W37

jfs: Regular file corruption check

2025-09-09 CVE-2025-38698

highMicrosoft MSRC 2025-W37

jfs: truncate good inode pages when hard link is 0

2025-09-09 CVE-2025-39743

criticalMicrosoft MSRC 2025-W37

jfs: upper bound check of tree index in dbAllocAG

2025-09-09 CVE-2025-38697

highMicrosoft MSRC 2025-W37

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

2025-09-09 CVE-2025-40928

highMicrosoft MSRC 2025-W37

kernfs: Fix UAF in polling when open file is released

2025-09-09 CVE-2025-39881

mediumMicrosoft MSRC 2025-W37

kprobes: Fix check for probe enabled in kill_kprobe()

2025-09-09 CVE-2022-50266

mediumMicrosoft MSRC 2025-W37

ksmbd: fix refcount leak causing resource not released

2025-09-09 CVE-2025-39720

mediumMicrosoft MSRC 2025-W37

KVM: x86: use array_index_nospec with indices that come from guest

2025-09-09 CVE-2025-39823

highMicrosoft MSRC 2025-W37

libceph: fix invalid accesses to ceph_connection_v1_info

2025-09-09 CVE-2025-39880

mediumMicrosoft MSRC 2025-W37

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

2025-09-09 CVE-2025-59375

highMicrosoft MSRC 2025-W37

Libsoup: improper handling of http vary header in libsoup caching

2025-09-09 CVE-2025-9901

mediumMicrosoft MSRC 2025-W37

Libsoup: out-of-bounds read in cookie date handling of libsoup http library

2025-09-09 CVE-2025-11021

highMicrosoft MSRC 2025-W37

Libssh: memory exhaustion via repeated key exchange in libssh

2025-09-09 CVE-2025-8277

lowMicrosoft MSRC 2025-W37

Libtiff: libtiff write-what-where

2025-09-09 CVE-2025-9900

highMicrosoft MSRC 2025-W37

Libxslt: use-after-free with key data stored cross-rvt

2025-09-09 CVE-2025-10911

mediumMicrosoft MSRC 2025-W37

Linux Kernel: Mehrere Schwachstellen ermöglichen Privilegieneskalation

2025-09-09 CVE-2023-6931

mediumRed Hat 2025-W37

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-54894

highMicrosoft MSRC 2025-W37

LoongArch: BPF: Fix jump offset calculation in tailcall

2025-09-09 CVE-2025-38723

mediumMicrosoft MSRC 2025-W37

LoongArch: Optimize module load time by optimizing PLT/GOT counting

2025-09-09 CVE-2025-39767

mediumMicrosoft MSRC 2025-W37

loop: Avoid updating block size under exclusive owner

2025-09-09 CVE-2025-38709

highMicrosoft MSRC 2025-W37

Malicious Key Exchange Messages may Lead to Excessive Resource Consumption

2025-09-09 CVE-2025-48040

mediumMicrosoft MSRC 2025-W37

MapUrlToZone Security Feature Bypass Vulnerability

2025-09-09 CVE-2025-54107

mediumMicrosoft MSRC 2025-W37

MapUrlToZone Security Feature Bypass Vulnerability

2025-09-09 CVE-2025-54917

mediumMicrosoft MSRC 2025-W37

media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar

2025-09-09 CVE-2025-38693

mediumMicrosoft MSRC 2025-W37

media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls

2025-09-09 CVE-2025-39711

highMicrosoft MSRC 2025-W37

media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()

2025-09-09 CVE-2025-39713

highMicrosoft MSRC 2025-W37

media: usbtv: Lock resolution while streaming

2025-09-09 CVE-2025-39714

mediumMicrosoft MSRC 2025-W37

media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()

2025-09-09 CVE-2025-38680

highMicrosoft MSRC 2025-W37

media: venus: Add a check for packet size after reading from shared memory

2025-09-09 CVE-2025-39710

mediumMicrosoft MSRC 2025-W37

media: venus: Fix OOB read due to missing payload bound check

2025-09-09 CVE-2025-38679

mediumMicrosoft MSRC 2025-W37

media: venus: protect against spurious interrupts during probe

2025-09-09 CVE-2025-39709

mediumMicrosoft MSRC 2025-W37